This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/wac8HuFAOI-SfZPjuMnpfnmiLcw.roa File: wac8HuFAOI-SfZPjuMnpfnmiLcw.roa (raw, json) Hash identifier: Gbt5Dg2xQXxutS7Oid+1a/Q1oM3HHS7hgE1kaFGg12o= Subject key identifier: C1:A7:3C:1E:E1:40:38:8F:92:7D:93:E3:B8:C9:E9:7E:79:A2:2D:CC Certificate issuer: /CN=342697a82f214f8d529e28f5b5003d2bba236c86 Certificate serial: 019BBB96BEFEAD7B9348ABF924D4D409C499 Authority key identifier: 34:26:97:A8:2F:21:4F:8D:52:9E:28:F5:B5:00:3D:2B:BA:23:6C:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/wac8HuFAOI-SfZPjuMnpfnmiLcw.roa Signing time: Wed 14 Jan 2026 08:19:37 +0000 ROA not before: Wed 14 Jan 2026 08:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51058 IP address blocks: 91.229.194.0/23 maxlen: 23 2001:678:c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 17:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:96:be:fe:ad:7b:93:48:ab:f9:24:d4:d4:09:c4:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342697a82f214f8d529e28f5b5003d2bba236c86 Validity Not Before: Jan 14 08:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1a73c1ee140388f927d93e3b8c9e97e79a22dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:46:75:09:f7:86:98:91:38:2b:b3:2a:78:48: 6a:dc:ef:6e:cb:c2:47:13:be:db:b7:a5:74:a3:63: fb:77:b1:15:ac:00:42:a9:52:47:a4:42:e1:09:13: 63:9c:8f:49:45:bf:6b:58:d6:ed:48:6b:3a:35:78: 6a:2b:68:e5:d9:ea:f5:54:be:eb:25:aa:56:e4:f3: 75:c7:12:dc:b3:c5:08:84:e6:e1:ad:4b:fa:b3:38: 41:72:23:2b:f9:8a:7c:98:f4:53:04:b1:00:33:ce: ae:85:f1:8f:30:bd:b8:99:8a:d9:6b:6f:1f:2e:a9: 18:cc:03:42:bb:d5:f5:9f:79:ab:03:2a:be:76:fe: f4:36:53:fb:d2:e8:d3:f8:f9:c7:53:fe:89:66:6c: ee:87:c1:2e:78:3d:e7:87:24:c9:28:e0:4f:e8:ce: e0:ce:49:6a:5c:a9:ad:7f:b1:a0:15:61:ba:e8:df: 44:2e:66:ce:0a:0a:93:e7:ed:42:90:21:97:e4:e8: 28:7b:fd:7e:89:6d:cd:e7:75:2a:79:15:60:6a:08: 47:07:fe:37:7e:a7:78:7d:23:b4:73:47:a0:8e:ef: da:83:6f:66:d2:3a:03:53:37:7e:88:10:ef:43:36: 31:6a:de:28:59:38:dd:87:86:31:fc:e1:10:7c:77: 25:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A7:3C:1E:E1:40:38:8F:92:7D:93:E3:B8:C9:E9:7E:79:A2:2D:CC X509v3 Authority Key Identifier: keyid:34:26:97:A8:2F:21:4F:8D:52:9E:28:F5:B5:00:3D:2B:BA:23:6C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/wac8HuFAOI-SfZPjuMnpfnmiLcw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.194.0/23 IPv6: 2001:678:c0::/48 Signature Algorithm: sha256WithRSAEncryption 87:ea:e9:5b:59:16:c3:23:5c:91:51:82:71:58:18:5a:8d:3d: 68:8c:3c:a7:6b:b6:19:f2:85:16:cb:2e:8e:7c:5e:42:c8:b6: b9:28:92:a4:25:84:71:36:b8:4d:d9:6e:57:c4:6e:cd:54:1e: 22:e7:fb:3a:88:b3:bc:f9:99:c0:a6:ad:13:04:af:d6:d9:09: 57:5d:16:0d:b8:71:5a:66:69:a8:fd:42:0e:f0:14:c6:fa:6b: e7:f2:43:cb:48:e7:03:7d:88:01:7e:e8:39:bb:e6:f0:3e:3d: 72:b9:a5:8d:b1:ec:9e:ea:d3:18:2c:23:2c:eb:42:71:f0:5b: a0:cc:cf:c8:18:3f:11:2e:9d:0c:1b:37:09:c6:ac:94:1a:86: f3:bc:e9:e7:72:9a:a0:47:64:0c:f4:3b:e2:e1:9f:3e:7e:78: 4b:1e:06:b2:f6:17:2a:ff:55:dd:51:11:52:02:03:cc:df:4a: 5a:ac:bb:9a:9e:02:f9:47:5b:17:73:66:f7:ad:77:f9:9d:6c: 33:f4:2b:f3:e7:d1:ab:e1:44:81:52:2e:a8:fe:1d:7c:3e:31: a6:1c:1c:2f:d1:42:f9:b0:c7:ed:5a:2e:ba:e6:69:65:24:18: 63:3f:f2:4a:59:b0:fc:a0:46:65:c2:d1:a0:aa:aa:66:25:70: a4:2f:be:b2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZu7lr7+rXuTSKv5JNTUCcSZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MjY5N2E4MmYyMTRmOGQ1MjllMjhmNWI1MDAzZDJiYmEy MzZjODYwHhcNMjYwMTE0MDgxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWE3M2MxZWUxNDAzODhmOTI3ZDkzZTNiOGM5ZTk3ZTc5YTIyZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0Z1CfeGmJE4K7MqeEhq3O9uy8JH E77bt6V0o2P7d7EVrABCqVJHpELhCRNjnI9JRb9rWNbtSGs6NXhqK2jl2er1VL7r JapW5PN1xxLcs8UIhObhrUv6szhBciMr+Yp8mPRTBLEAM86uhfGPML24mYrZa28f LqkYzANCu9X1n3mrAyq+dv70NlP70ujT+PnHU/6JZmzuh8EueD3nhyTJKOBP6M7g zklqXKmtf7GgFWG66N9ELmbOCgqT5+1CkCGX5Ogoe/1+iW3N53UqeRVgaghHB/43 fqd4fSO0c0egju/ag29m0joDUzd+iBDvQzYxat4oWTjdh4Yx/OEQfHcl4QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMGnPB7hQDiPkn2T47jJ6X55oi3MMB8GA1UdIwQY MBaAFDQml6gvIU+NUp4o9bUAPSu6I2yGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkNhWHFDOGhUNDFTbmlqMXRRQTlLN29qYklZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jNzU4YWMtZjU5MS00Njg5LTk4Zjkt NzkwNDZmOTBjNTQyLzEvd2FjOEh1RkFPSS1TZlpQanVNbnBmbm1pTGN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9jNzU4YWMtZjU5MS00Njg5LTk4ZjktNzkwNDZmOTBjNTQy LzEvTkNhWHFDOGhUNDFTbmlqMXRRQTlLN29qYklZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBW+XCMA8E AgACMAkDBwAgAQZ4AMAwDQYJKoZIhvcNAQELBQADggEBAIfq6VtZFsMjXJFRgnFY GFqNPWiMPKdrthnyhRbLLo58XkLItrkokqQlhHE2uE3ZblfEbs1UHiLn+zqIs7z5 mcCmrRMEr9bZCVddFg24cVpmaaj9Qg7wFMb6a+fyQ8tI5wN9iAF+6Dm75vA+PXK5 pY2x7J7q0xgsIyzrQnHwW6DMz8gYPxEunQwbNwnGrJQahvO86edymqBHZAz0O+Lh nz5+eEseBrL2Fyr/Vd1REVICA8zfSlqsu5qeAvlHWxdzZvetd/mdbDP0K/Pn0avh RIFSLqj+HXw+MaYcHC/RQvmwx+1aLrrmaWUkGGM/8kpZsPygRmXC0aCqqmYlcKQv vrI= -----END CERTIFICATE-----Generated at Wed Jan 21 03:05:37 2026 by rpki-client